This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft File: WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft (raw, json) Hash identifier: HKfPgOP8M/EDBIKPTJvgE3b06BsxklrdGEA2qlLRNCE= Subject key identifier: 63:84:EE:B4:81:EC:35:87:C6:49:D5:E0:8F:DF:A8:BD:9B:09:02:17 Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE Certificate issuer: /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae Certificate serial: 019B47022C055ABD12852111A012DE395EF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft Manifest number: 06C7 Signing time: Mon 22 Dec 2025 17:01:23 +0000 Manifest this update: Mon 22 Dec 2025 17:01:23 +0000 Manifest next update: Tue 23 Dec 2025 17:01:23 +0000 Files and hashes: 1: PIXJy1lwlibwbVRJMDgxK7qX3n8.roa (hash: G+nFG8M3t0bz2vOGqdbaOSNmLf0qzMF1t7uKbdGXy6c=) 2: WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl (hash: J9appBUlZMfLXiDwSdZ7GawajXWljgDiFFSNEEq+1zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:2c:05:5a:bd:12:85:21:11:a0:12:de:39:5e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae Validity Not Before: Dec 22 17:01:23 2025 GMT Not After : Dec 23 17:01:23 2025 GMT Subject: CN=6384eeb481ec3587c649d5e08fdfa8bd9b090217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:47:a9:ae:5c:6d:b9:d7:a9:52:95:e5:f3:ed: dd:ed:54:5d:8a:14:fa:73:b6:be:f3:63:9f:64:99: bf:23:c1:0b:30:6f:22:e4:a4:76:60:fd:a9:71:66: 7e:0e:b8:d0:3e:ff:24:60:0f:d1:f5:79:1b:66:fe: 4a:1e:e2:ea:a1:83:b2:12:88:2b:c3:b8:5d:74:eb: 99:15:cd:d9:7e:e8:9f:5b:a3:5b:e6:6e:5b:97:e1: e8:cf:ce:02:02:9f:87:0f:ea:1d:4b:7f:7c:74:6b: 8e:50:79:cf:1c:84:aa:52:4a:9b:2a:c4:a2:65:97: fd:85:98:9e:9f:90:dd:98:73:fe:f7:ad:74:0e:1d: a1:2c:65:e9:a7:05:1a:c3:f1:35:48:f6:b6:b8:30: b4:bb:cd:19:cc:ac:6e:0e:55:92:66:89:00:a2:7d: 10:2e:7f:96:c6:e1:d5:5c:34:ac:08:57:3e:2d:16: 9f:3c:1f:9f:bf:98:27:d2:2a:6e:11:c4:77:4a:00: 60:5a:b2:ad:87:bf:3d:82:6a:aa:25:c9:db:e9:a2: c0:eb:01:2f:58:68:d2:e9:d0:1e:ba:27:6c:f6:6f: 09:d2:c8:5b:01:ea:f8:a3:e4:3d:98:22:0d:cf:54: 8d:78:c6:5f:0e:5f:ca:88:f7:94:cb:44:0a:97:64: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:84:EE:B4:81:EC:35:87:C6:49:D5:E0:8F:DF:A8:BD:9B:09:02:17 X509v3 Authority Key Identifier: keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:14:e4:4c:49:c0:b9:1c:dd:9a:11:4c:8c:6e:ff:59:7d:b7: 87:d9:b2:ae:93:77:32:5d:e5:2d:05:69:6c:f8:8f:a4:81:a2: 94:f0:3f:72:29:b6:51:a2:b6:fb:9b:8d:8d:68:2e:0c:4a:84: b9:2b:2a:07:0a:d2:94:e6:af:75:7c:f3:a7:b7:19:bc:25:3a: 99:82:91:15:77:21:ae:50:e6:0d:e5:d8:6c:f5:eb:77:13:77: b6:36:55:b4:ec:cb:b9:7d:cb:3d:db:3a:23:5a:5e:6a:94:23: 60:d3:2f:fe:6c:f0:8f:f0:85:82:48:08:22:6a:94:7a:3e:95: 4f:44:79:4d:a2:d5:56:39:ef:87:08:42:03:93:fb:0e:7a:f8: f0:13:87:6b:0c:62:c7:33:48:02:f1:59:a5:ab:30:f5:13:2b: a8:35:1a:65:9a:a0:6b:a1:2a:9b:25:d2:08:70:1c:1e:92:83: 3f:2e:e6:3b:11:16:36:6c:9c:b5:c8:b0:94:94:03:12:d2:7b: fa:14:7f:36:19:e5:94:27:20:c2:73:dd:bc:38:c5:0c:39:bb: 09:c6:17:a0:3d:f1:c8:c2:10:a3:b1:92:cf:49:c2:56:5f:f6: 2e:47:53:73:28:3f:76:44:e5:2d:5c:56:c4:da:3a:32:83:a2: 1c:bb:5f:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAiwFWr0ShSERoBLeOV7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZGU1MDQ0ZWQ4Mzg3NWM3ZTllZThlY2I4N2RkNmQzMWRk NWM0YWUwHhcNMjUxMjIyMTcwMTIzWhcNMjUxMjIzMTcwMTIzWjAzMTEwLwYDVQQD Eyg2Mzg0ZWViNDgxZWMzNTg3YzY0OWQ1ZTA4ZmRmYThiZDliMDkwMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10eprlxtudepUpXl8+3d7VRdihT6 c7a+82OfZJm/I8ELMG8i5KR2YP2pcWZ+DrjQPv8kYA/R9XkbZv5KHuLqoYOyEogr w7hddOuZFc3ZfuifW6Nb5m5bl+Hoz84CAp+HD+odS398dGuOUHnPHISqUkqbKsSi ZZf9hZien5DdmHP+9610Dh2hLGXppwUaw/E1SPa2uDC0u80ZzKxuDlWSZokAon0Q Ln+WxuHVXDSsCFc+LRafPB+fv5gn0ipuEcR3SgBgWrKth789gmqqJcnb6aLA6wEv WGjS6dAeuids9m8J0shbAer4o+Q9mCINz1SNeMZfDl/KiPeUy0QKl2T91wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOE7rSB7DWHxknV4I/fqL2bCQIXMB8GA1UdIwQY MBaAFFjeUETtg4dcfp7o7Lh91tMd1cSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQt YWE5NTg3ODhlZWJmLzEvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQtYWE5NTg3ODhlZWJm LzEvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxTkTEnA uRzdmhFMjG7/WX23h9myrpN3Ml3lLQVpbPiPpIGilPA/cim2UaK2+5uNjWguDEqE uSsqBwrSlOavdXzzp7cZvCU6mYKRFXchrlDmDeXYbPXrdxN3tjZVtOzLuX3LPds6 I1peapQjYNMv/mzwj/CFgkgIImqUej6VT0R5TaLVVjnvhwhCA5P7Dnr48BOHawxi xzNIAvFZpasw9RMrqDUaZZqga6EqmyXSCHAcHpKDPy7mOxEWNmyctciwlJQDEtJ7 +hR/NhnllCcgwnPdvDjFDDm7CcYXoD3xyMIQo7GSz0nCVl/2LkdTcyg/dkTlLVxW xNo6MoOiHLtfLw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:54:45 2025 by rpki-client